The Flarum phone number verification extension was my first Flarum plugin. At the time, I urgently needed a feature that supported real-name verification. Later, I released over ten more plugins, and now, looking back, I realize that it left behind quite a few issues. When I have some free time, I will complete the content mentioned above.
1. I do not recommend this. It should only allow the user to perform the operation themselves.
2. It uses standard AES encryption, which can be decrypted independently.
3. The cooling time is configurable, but note that the Alibaba verification code SMS template only allows one variable, so this time needs to be set in advance; the default value is 5 minutes.
The 4, 5, and Alibaba Cloud console provide a method for daily phone number limits, and within the platform, email verification must be completed before phone number verification. This prevents the above fraudulent activities from occurring and allows for timely detection of any anomalies.
闽ICP备2021006864号-7
闽公网安备35020602002794号
互联网举报中心